I'm running squidGuard 1.1.4. I did a little testing this evening and learned something
interesting.

When I added 192.168.44.1 (for example) to a banned destination group, it would block 
me
when I tried http://192.168.44.1, but it would let me through if I tried
http://192.168.044.001. If I blocked 192.168.044.001, then http://192.168.044.001 was
blocked but http://192.168.44.1 got through.

Rick

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Simon Elliott
> Sent: Tuesday, May 21, 2002 8:20 AM
> To: Rick Matthews
> Cc: Squidguard Mailing List
> Subject: RE: Banning by IP Address
>
>
> Thanks for the reply,
>
> I've added it to the 'domains' file, and used standard IP notation.
> The site is not available when named.
> I am aware of the !in-addr, but I have a lot of test environments that go by
> number only so its best not to use it. I have a script that converts the
> name to a number anyway when its blocked.
>
> According to my access.log it goes to the IP stated so its not a problem
> there either.
>
> very strange... any ideas?
>
> Cheers,
>
> Si.
>
>
> -----Original Message-----
> From: Rick Matthews [mailto:[EMAIL PROTECTED]]
> Sent: 21 May 2002 14:01
> To: Simon Elliott
> Cc: Squidguard Mailing List
> Subject: RE: Banning by IP Address
>
>
> > if I try and ban an IP address in the banned
> > list, it doesn't work.
>
> Let me make sure I understand what you are saying. You've added a site's ip
> address to a
> defined destination group, but the site is not being blocked? Here are a few
> things to
> think about:
>
> Did you add it to domains or urls?
>
> Did you add it in the standard xxx.xxx.xxx.xxx format?
>
> Are the text entries in the same destination group being blocked?
>
> When you access this site, does the entry in your squid access.log reflect
> the blocked ip
> address? Let me try that one again - You've blocked <20.20.20.20>, but you
> enter
> http://20.20.20.20 in your browser and you are allowed into the site. Look
> at your squid
> access.log for that entry. Does it show that you were requesting
> http://20.20.20.20?
>
> Did you know that you can force the use of domain names over ip addresses by
> using the
> wildcard !in-addr in your acl? (per
> <http://www.squidguard.org/config/#Builtin>)
>
> Hope that helps...
>
> Rick Matthews
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Simon Elliott
> > Sent: Tuesday, May 21, 2002 4:50 AM
> > To: [EMAIL PROTECTED]
> > Subject: Banning by IP Address
> >
> >
> > I am having an odd problem with squidguard, although its working perfectly
> > well in every other respect, if I try and ban an IP address in the banned
> > list, it doesn't work.
> > Does anyone have any idea why this should be?
> >
> > Thanks in advance
> >
> > Simon.
> >
> > --
> > Webscript Designs Ltd.
> >
> >
>
>

Reply via email to